Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gw2QynEnetJoDMdZCQj89yLS4UQ.roa
File: gw2QynEnetJoDMdZCQj89yLS4UQ.roa (raw, json)
Hash identifier: C5XwO/Eda8Q5sqxbma6vRVZFlPRfEDHPlULfnaOhu7A=
Subject key identifier: 83:0D:90:CA:71:27:7A:D2:68:0C:C7:59:09:08:FC:F7:22:D2:E1:44
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 06571DB7
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gw2QynEnetJoDMdZCQj89yLS4UQ.roa
Signing time: Sun 20 Mar 2022 21:47:34 +0000
ROA not before: Sun 20 Mar 2022 21:47:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.227.0/24 maxlen: 24
45.81.149.0/24 maxlen: 24
45.92.30.0/23 maxlen: 24
45.81.151.0/24 maxlen: 24
45.92.28.0/24 maxlen: 24
45.92.28.0/23 maxlen: 23
45.92.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106372535 (0x6571db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Mar 20 21:47:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=830d90ca71277ad2680cc7590908fcf722d2e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:66:c3:6f:94:e1:97:25:dd:cb:f8:8c:21:
b6:65:06:7f:23:d4:2b:4e:76:cc:de:f4:f1:72:b5:
35:5e:fc:7a:75:9c:e7:3b:4a:bd:f3:22:bb:0a:6a:
1a:c8:79:80:06:29:4a:9e:b6:08:db:d1:26:06:cf:
93:c4:9d:d3:9a:f8:96:47:31:74:f6:c0:bf:41:bd:
61:0c:2d:0b:95:ea:10:86:1d:e4:eb:ff:d7:a2:a3:
b3:05:43:12:c6:41:9f:27:f2:b0:09:6b:1f:61:50:
88:1f:76:11:ad:2a:fc:4b:de:0a:27:d6:ed:db:83:
76:00:73:6d:88:b7:7f:24:97:58:de:ab:e9:2e:40:
e2:39:ca:a4:a4:e4:00:77:be:17:ea:98:7a:86:c9:
69:a5:30:7f:64:7e:b1:eb:3c:b7:db:ef:f3:a0:5d:
12:f6:49:86:b4:ba:1d:bb:4c:38:d7:62:cd:38:63:
61:b2:c1:fe:8a:62:af:4a:6a:fa:23:df:e8:42:8d:
eb:61:83:f9:9d:72:88:f3:e0:4d:ac:69:2d:fa:a3:
cf:6f:37:2f:c7:c2:9a:bf:df:76:89:60:3d:d6:2a:
ca:30:68:82:e7:f4:b1:92:8f:3f:88:b1:f0:59:69:
ab:a2:d9:6b:72:16:3b:1b:20:7b:2e:cb:29:31:71:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:90:CA:71:27:7A:D2:68:0C:C7:59:09:08:FC:F7:22:D2:E1:44
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gw2QynEnetJoDMdZCQj89yLS4UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.149.0/24
45.81.151.0/24
45.92.28.0/22
185.199.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:48:9e:15:a7:61:e3:d1:c5:dc:0c:2f:cf:5d:60:6f:18:32:
7d:39:d9:93:85:50:00:1b:e2:98:9a:6f:bb:b3:1d:c0:9f:c3:
b7:4f:82:dc:ab:c2:b1:8e:e0:9e:61:c6:4c:51:e7:3d:d4:e5:
77:e4:9d:b1:47:b2:8f:43:70:34:2c:6c:91:d9:65:df:dd:ab:
e3:e2:0c:62:56:d6:4f:38:87:d7:3b:01:89:1f:ad:d4:ca:0f:
f3:3d:1b:39:74:b0:bf:ca:40:54:a0:a7:dd:52:19:f3:e4:8e:
32:01:f8:59:f6:18:a9:91:93:39:67:a2:12:1b:94:b0:c6:21:
17:5a:dd:c7:40:ee:23:01:8b:69:f5:ce:4b:d0:94:08:16:eb:
c3:4c:fb:d6:aa:47:71:9c:6d:3a:6d:1e:08:fa:a1:69:e0:50:
af:36:1a:6b:b4:a4:1f:74:b5:b1:e2:16:af:57:91:35:1f:9a:
eb:54:2d:26:9b:a2:33:82:4b:1a:5c:c6:f5:6a:63:29:22:03:
0b:98:18:cc:ce:db:d1:36:e2:05:d8:27:16:98:87:a1:1f:9a:
54:f6:31:b0:e0:fe:a8:2c:ed:1a:e1:4e:15:c6:b4:5a:50:92:
3d:26:66:1f:6b:7b:04:c0:46:19:84:02:51:a1:10:0e:61:e9:
08:f4:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org